Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RFzJaPB] 'Start' = '00000002'
- '%PROGRAM_FILES%\zLlI\YgRWZ.exe'
- iexplore.exe
- %PROGRAM_FILES%\zLlI\YgRWZ.exe
- %WINDIR%\windns.ini
- %PROGRAM_FILES%\zLlI\HaGbei.dll
- %WINDIR%\windns.ini
- 'ha####p04.3322.org':8900
- DNS ASK ha####p04.3322.org
- ClassName: 'MS_WINHELP' WindowName: '(null)'